CVE-2021-3538

[womblep]

Docker image on Docker Hub has a critical security defect CVE-2021-3538
There is a fixed Go UUID module, it probably just needs a refresh

[github-actions]

Your report is appreciated. Please star this repository to motivate its developers! ⭐

[adubovikov]

Thank you! Fixed!

[womblep]

@adubovikov thank you so much!
Can you please push a new container version to docker hub?

[adubovikov]

@lmangani can you please push ?

[adubovikov]

@womblep it was pushed automaticaly! Please check

[womblep]

@adubovikov no, still seems to be the old version

[lmangani]

@womblep our latest images are hosted on ghcr and that's what should be used
https://github.com/orgs/sipcapture/packages

What instructions are you following?

[womblep]

@lmangani I went here https://github.com/sipcapture/homer/wiki/Quick-Install#-docker-install and used the docker compose here https://github.com/sipcapture/homer7-docker/blob/7.7/heplify-server/hom7-prom-all/docker-compose.yml . All the images are pulled from Docker Hub, I didn't realise the newest ones were on ghcr.io
It might be worth changing that docker compose and noting that in the documentation.

[lmangani]

That's indeed on us - we need to update all guides/docs, assigned to the team